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BOUNDING  THE  RELIABILITY  OF  MULTISTATE  SYSTEMS 
David  A.  Butler 

1 .  In  trod  uct 1 o n 

Computing  the  exact  reliability  of  a  complex  system  can  Involve 
extremely  large  amounts  of  computation.  Therefore,  a  number  of  more 
easily  computed  approximations  to  the  system  reliability,  based  upon 
minimal  paths  and  minimal  cuts,  have  been  proposed,  (1),  (7],  |11], 

(14).  Some  of  these  approxlmat Ions  are  conservative  in  that  they 
underestimate  the  system  reliability,  and  the  others  are  optimistic  In 
that  they  overestimate.  Thus,  each  approximation  Is  actually  a 
reliability  bound.  To  further  reduce  the  computations  of  system 
reliability  to  feasible  levels,  modular  decomposition).  of  complex 
systems  have  been  exploited,  both  In  the  calculation  of  the  exact  system 
reliability  and  its  bounds  |  4  J. 

All  of  the  work  mentioned  above  has  been  limited  to  binary 
coherent  systems.  Recently  a  number  of  Investigators  have  begun  to  deal 
with  multistate  systems.  In  which  components  can  exist  In  more  than  two 
states,  (  2  J,  [  5  ),  I  6  1.  (10),  (12),  (13).  This  report  will  develop 
reliability  bounds  for  multistate  systems  analogous  to  those  mentioned 
above  for  binary  system*.  The  development  of  these  results  will  be 
similar  to  that  for  their  binary  counterparts,  and  readers  Interested 
In  the  details  of  the  proofs  In  Sections  2  and  3  may  find  It  helpful  to 
refer  back  to  the  corresponding  binary  proofs. 
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The  notation  used  In  this  report  follows,  with  a  few  exceptions, 
that  contained  In  (  1  ),  [  6  ): 

1)  x  ■  (*.  x  )  denotes  the  vector  of  component  states. 

1  n 

11)  C  -  {1,  2,  ....  n)  denotes  the  set  of  component  labels. 

Ill)  S  -  (0,  1 . M)  denotes  the  set  of  component  states,  l.e., 

t  S  for  all  1  e  C.  The  states  are  ordered,  with  0 

being  the  worst  state  and  M  the  best. 

lv)  The  terms  "Increasing"  and  "decreasing"  are  used  In  the  sense 
of  "non-decreasing"  and  "non-lncreaslng",  respectively. 

v)  X  -  (X. . X  )  denotes  a  random  vector  of  component  states. 

l  n 

vi)  q^  -  PriXj  -  J)  1  s  C,  JcS. 

»U)  Qt(J)  -  Pr{Xt  >  J)  1  c  C,  j  o  S. 
vill)  A  "performance-distribution  vector"  Is  a  vector 

v  -  (vQ,  Vj,  ....  vM)  satisfying  0  <  Vj  <  1,  vQ  •  1,  and 

v  £  Vj,  1-1 . M.  For  example,  Qj(*)  Is  such  a 

vector. 

lx)  A  "performance-distribution  matrix"  Is  a  matrix  all  of  whose 
rows  are  performance-distribution  vectors.  For  example, 

Q.(«)  Is  such  a  matrix. 


X) 

1  < 

X 

means 

yA  <  xt  for  all  1,  and 

y4  <  Xj  for  some  1. 

n 

n 

xl) 

u 

1-1 

*1 

-  1  - 

n  (i  -  *.). 

i-i  1 

Eli) 

«  : 

Sn 

♦  S. 

*(x)  is  the  system  state. 

given  the  vector  of 

component  states  Is  x. 
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xlll)  When  X. 9  ...»  X  arc  Independent,  we  will  write 
1  n 

H*(Q)  -  PrU(X)  >  m),  and  H#(Q)  -  (H^(Q),  H*  (Q) . h"<Q)). 

Note  that  H^(Q)  la  a  per f ormance-dlstr lbut ion  vector, 
xlv)  Script  letters  V ,  dt,  P  ,  H,  j  will  denote  partitions 

of  C  into  N  ♦  1  sets,  e.g.,  .t  -  (P°,  P1 ,  ....  P*)  where 

pl  c  C,  P.  n  p  Is  empty  for  1  4  J,  and  U  P^  -  C. 

1  J  J-0 

xv)  Clven  a  partition  dt  ,  x(.y>  -  (x,(.*),  x  (dt))  will 

i  n 

n 

denote  a  vector  in  S  for  which  1  e  P  for  all  1. 

(Intuitively,  .t  defines  the  state  of  each  component  by 
partitioning  the  set  C  of  coaponents  Into  H  ♦  1  subsets; 
x(.t)  is  the  vector  of  component  states  corresponding  to.^.) 
There  Is  a  one-to-one  correspondence  between  partitions 
of  C  and  vectors  In  Sn. 

xvl)  Clven  two  partitions  P  and  H  ,  we  will  define  the 
partition  7  *  P  v  H  by 

x^^)  -  max(x1(P  ),  xt(*))  1  C  C 

and  the  partition  dt  •  I  A  #  by 

xi(dt)  -  mln(  Xj  ( P  ),  x^*))  1  e  C  . 

xvll)  (kjt  x)  m  (Xj,  ^  •••«  x^) • 
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There  is  no  agreement  on  the  most  appropriate  definition  of 
"multistate  coherent  system".  Almost  no  two  definitions  agree,  the 
differences  ranging  from  minor  to  major.  Griffith  (10]  discusses  and 
compares  a  number  of  possible  definitions.  The  definition  we  will  use 
in  this  report  is  one  proposed  earlier  by  the  author  (  5  ],  and  is  very 
similar  to  one  proposed  in  (10). 

Definition  1.1.  The  ordered  pair  (C,  ♦)  is  a  multlatate  coherent 
system  if  and  only  if 

1)  S(0)  -  0  and  #(M)  -  M,  where  M  -  (H . M) , 

ii)  J(x)  is  increasing  in  x . 
ill)  for  every  i  ■  1,  ...,  n,  there  exists  an  x  such  that 

♦<Mt,  x)  >  ♦(01,  x).  □ 

If  some  component  i  naturally  has  only  states  0,  . ...  k,  where 
k  «  M,  one  can  nonetheless  formally  consider  the  component  to  also 
have  states  k  ♦  1,  . ..,  M,  which  are  operat lonal ly  identical  to 
state  k,  and  then  simply  take  to  be  xero  for  l  >  k.  Thus, 

systems  whose  components  have  varying  numbers  of  natural  states  can 
be  accoaBodated  in  the  above  definition. 

Definition  1.2.  The  multistate  coherent  system  (A,  x)  is  *  module 

of  the  multistate  coherent  system  (C,  ♦)  if  and  only  if  A  C  C  and 
A  Ac 

♦(x)  -  *(x(x  ),  x  ),  where  t  is  a  multistate  coherent  structure 
A  Ac 

function,  and  x  ,  x  denote  those  subvectors  of  x  consisting  of 
coordinates  which  are  in  A,  AC,  respectively.  □ 


A 


Definition  1.3.  A  modular  decomposition  of  a  multistate  coherent 
■ystea  (C,  ♦)  Is  e  set  of  disjoint  modules  (Ajt  Xj>.  ...»  (Ar»  xf) 
together  with  an  organising  structure  *  such  that 


1)  *  Is  a  multlstate  coherent  structure  function, 

11)  A  ,  A  partitions  C, 

1  A  A 

ill)  ♦  (»)  •  t(X}(x  ).  xr  (*  r))* 


□ 


In  the  following  sections  the  criterion  by  which  we  will  assess 
the  system  performance  is  Pr($(X)  >  *)  where  a  -  1,  H.  This 

criterion  differs  from  some  others  which  have  been  proposed,  notably 
E[4(X)],  or  E[u(«(X))],  (  6  1 .  (10).  To  compare  these  criteria,  consider 
a  very  simple  example  of  two  systems  having  states  0,  1,  2.  The  first 
system  has  a  502  chance  of  working  perfectly  (being  In  state  2)  and 
a  502  chance  of  falling  totally  (being  In  state  0).  The  second  always 
Is  partially  functioning  (state  1).  Under  the  E[4(X))  criterion, 
these  tvo  systems  perform  Identically,  yet  the  designer  who  only  wanted 
to  avoid  total  failure  would  surely  prefer  the  second.  At  a  system  level, 
the  design  specifications  are  likely  to  be  of  the  fora  "meet  or  exceed 
a  certain  system  state  at  least  a  certain  percentage  of  tlae",  and 
so  argues  In  favor  of  a  mlnfaua-Ievel-of-perforaance  criterion.  In 
the  following  we  will  speak  of  "systea  performance  at  alnlmua  level  a" 
to  describe  a  criterion  of  system  performance  at  state  m,  a  ♦  1,  .... 


or  M. 


2.  Bounding  the  System  Reliability  by  Means  of  Paths  and  Cuts 

Using  E[$(X)j  as  the  measure  of  system  performance,  El-Neweihi, 
Proschan,  and  Sethuraman  (  6  ]  have  developed  an  upper  and  lower  bound 
far  the  system  performance  level.  These  bounds  are  derived  by  comparing 
the  structure  4  to  a  "parallel"  system  and  a  "series"  system  built 
from  the  same  components.  Other  common  bounds  for  binary  coherent  systems, 
such  as  the  max-mln  bounds  |  1  ]  ,  the  path-cut  bounds  [  7  ) ,  and  the 
Bonferronl  bound*  [11),  have  not  been  generalized  to  multistate 
system*  where  E(4(X))  is  the  system  performance  criterion.  The 
difficulty  in  doing  this  would  be  to  define  the  notions  of  paths  and  cuts 
which  such  bounds  require.  Performance  criteria  such  as  E[4(X)],  or 
the  more  general  E[u(4(X))]  (u(*)  a  utility  function)  proposed  by 

Cr iff  1th  (10),  do  not  seem  compatible  with  the  notions  of  paths  and  cuts. 

However,  notions  of  paths  and  cuts  can  be  developed  when  the  mlnlmum- 
per formance-leve 1  criterion  is  used.  (It  should  be  noted  that  with  an 
appropriate  choice  of  u(‘)i  Griffith's  criterion  of  E[u(4(X))] 
reduces  to  the  mini mum- per formance- level  criterion.) 

Def Ini t Ion  2.1.  A  partition  V  is  a  cut  for  system  performance  at 
minimum  level  ■  if  and  only  if  4(x(Y))  <  m.  A  cut  V  Is  a  minimal 

cut  for  system  performance  at  minimum  level  m  if  and  only  If  4(y)  >_  m 

for  all  jr  >  x(  V) .  □ 

Definition  2.2.  A  partition  is  a  path  for  system  performance  at 
minimum  level  m  if  and  only  if  4(x(d’))  >  m.  A  path  if  is  a  minimal 
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path  tor  system  performance  at  minimum  level  «  If  and  only  If 
♦  (/)  <  m  for  all  jf.  K  *(«^)*  □ 

Readers  wishing  a  more  complete  discussion  of  these  two 
definitions  are  referred  to  [  5  ). 


In  much  of  the  following  we  will  for  the  sake  of  brevity  simply 
refer  to  min  cuts  and  min  paths  when  the  minimum  system- performance 
level  Is  clear  from  the  context.  Also,  In  light  of  the  one-to-one 
correspondence  between  a  partition  V*  and  the  vector  xCV”),  we  will 
interchangeably  refer  to  min  cuts  by  V  or  x(V  ) ,  and  to  min  paths 
by  &  or  x(JF). 

Consider  a  multlstate  coherent  system  (C,  ♦)  with  min  paths 

and  ®in  CUt“  ^1*  *2’  Vt  for  lt*  P*rforMnce 

at  minimum  level  m.  Define  the  functions  Pj(x)  and  * ^  (x)  by 

means  of  the  following  equalities 


Pj(*)  " 


(;>x(  .^)) 


n 

n 

1-1 


{Xi>«i(  } 


1*  ••••  a. 


(2.1) 


■* J )  "  1(s^(Vj)>  "  *  "  ‘(l«*<Wj>> 


1  -  I, 


^  ^  ^  ( x  <x  (V  ) ) 

1-1  i-  i '  *} #  ' 


J  *  1|  t**|  t«  (2a2) 
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The  function  Pj (x)  is  called  the  minimal-path  structure  function 
corresponding  to  and  *^(x)  is  called  the  mini— 1-cut  structure 

function  corresponding  to  Vj.  As  the  following  theorem  shows ,  the 
functioning  of  the  system  at  minimum  level  m  Is  determined  by 
either  Its  minimal  paths  or  Its  minimal  cuts. 

Theorem  2,1. 

(2.3) 

(2.4) 

The  proof  follows  readily  from  Definitions  2.1  and  2.2.  G 

To  establish  bounds  on  the  system  reliability  based  on  min  paths 
and  min  cuts,  we  will  require  the  following  lemmas,  due  to  Esary,  Proachan, 
and  Walkup  [  8  ) . 

Lemma  2.1.  If  T. ,  T, . T  are  associated  random  variables,  then 

— ~  1  1  n 

n  4 

Pr{T.  >  t. . T  >  t  )  >  n  Pr<T.  >  t.)  (2.5) 

i  i  n  n  —  l  l 

and 

n 

Pr{T,  <  t. . T  <  t  )  >  [1  Pr{T .  <  t.)  (2.6) 

i  l  n  n  —  i^i  1  —  1 

for  any  choice  of  t^,  ...,  t  .  □ 

1 


l)  ‘(♦(Di.)  ' 
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Lemma  2.2.  If  T  •  (T, ,  T„ ,  . . . ,  T  )  Is  associated  and 

l  4  n 

f^(T),  ....  f^(T)  are  increasing  functions  of  T,  then 
fjtT),  ....  fjjCT)  are  associated. 

Theorem  2.2.  (Path-Cut  Bounds).  Let  X  “  (X^,  X^,  ....  X 
associated.  Then 

t  s 

n  PrU,(X)  -  I)  £  PrW(X)  >*}<//  Pr{p  (X)  -  1 
j-I  J  j-1  J 

Proof .  *^(X),  ....  ct(X)  are  increasing  functions  of  X 

Leona  2.2  are  themselves  associated.  Hence,  by  Lemma  2.1 
and  the  fact  that  <(•)  is  a  binary-valued  function, 

Pr(4(X)  >  m)  -  Pr{*j(X)  >  0 . *t(X)  >  0) 

t 

1  n  PrU  (X)  -  1)  . 
j-1  J 

To  establish  the  upper  bound,  use  Theorem  2.1  to  write 

\ 

PrU(X)  >  *)  -  1  -  PrU(X)  <  m) 

-  1  -  Pr{  P]l(X)  £  0 .  P#(X)  £  0 

Since  Pj(X),  ....  P8(X)  increasing  functions  of  ! 

by  Lenaa  2.2  associated,  we  can  apply  Lemma  2.1  to  obtain 


□ 

?  b* 

(2.7) 

and  so  by 
and  Theorem  2.1, 

(2.8) 

(2.9) 

and  therefore 
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Pr<*(X)  >  m)  <  1  -  U  Pr{  P  (X)  <  0) 
J-l  J 


-  U  Pr{  p  (X)  -  1}  . 
J-l  3 


(2.10) 

□ 


For  convenience,  take  Q^CM+l)  -  0  and  the  product  over  an  empty  aet 
of  Indices  to  be  one. 


Corollary  2.1.  (Path-Cut  bounds  for  Independent  Components).  Let 

X. ,  ....  X  be  Independent.  Then 
i  n 


t  r  h 

n  i  -  n  n  a  -  q  u  +  d)  <  h"(q) 

1-1  k-0  k  J  ~  ♦ 

J  leC, 


s  M 

<  u  n 

j-l  k-0 


n 

lcp*; 


Qt(k) 


(2.11) 


Proo£.  By  the  definition  of  p  ,  and  the  independence  of  X. ,  . . . ,  X  , 

J  1  n 


Pr(Pj(X) 


1)  -  Pr 


n 

n 

i-i 


(xl>*i(^J)) 


1 


-  n 

i-i 


^TlXl  >  Xt(  J»))  . 


(2.12) 
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Since  any  1  e  C  la  In  exactly  one  subset,  aay  P*,  of  the  partition 

dfj  •  <P° . p”> 


Pr(Xt  >  xi(J? ))  -  Pr(Xi  >  k)  -  Q±(k) 


when  1  c  P 


Pr{0j(X) 


n  pr<x  >  *  (jp ))  -  n  n  qj 

1-1  J  k-0  .  _k 


(2.13) 


and  the  upper  hound  follow*  from  Theorem  2.2.  The  lower  bound  follow* 
similarly.  □ 


Theorem  2.2  and  Corollary  2.1  provide  lower  bound*  baaed  upon  cuts  and 
upper  bounds  baaed  upon  paths.  We  next  establish.  In  Theorem  2.3  and 
Corollary  2.2  below,  lower  bounds  based  upon  paths  and  upper  bounds 
based  upon  cuts. 


Theorem  2.3.  (Hax-M In  Bounds). 


max  (Pr(p  (X)  -  1)}<P(+(X)  >  a)  <  aln  (PrW,(X)  -  D)  .  (2.14) 

l<J<e  J  l<j<t  J 


Proof.  By  Theorem  2.1,  for  any  choice  of  )  -  1 . s  and 


J'  -  1,  ....  t 


(2.15) 


Hence 


Pr(Pj(X)  -  1)  <  PrU(X)  >  a)  <  Pr(«jt(X)  -  1)  (2.16) 

for  all  1  <  J  <  »  and  1  <_  )'  <  t.  The  reault  follow*  by  Maximizing 
over  J  and  minimising  over  J*.  □ 

The  above  result  holds  regardless  of  whether  or  not  the  coaponents 
are  Independent  or  even  associated.  When  the  coaponents  are  associated 
we  have  the  following. 

Corollary  2.2.  (Max-Mln  Bounds  for  Associated  Coaponents)  If  X  Is 
associated,  then 


aax 

l<J<a 


n  n  q.  oo 

k-0  .  _k  1 

1»J*  j 


«  PU(X)  >  a) 


aln 

l<J<t 


1-/7  n  1 1  -  Q,(k  ♦  D) 

k-0 _ k  * 


(2.17) 


Proof .  By  LesSM 

are  associated. 


2.2,  the  random  variables  I , „  .  _  . , 

(x1>«1(jp» 

Proa  Pquatlon  2.12  and  L«au  2.1, 


1 


1.  2. 


•  •  •  •  n 
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PrlPj(X) 


1)  -  Pr 


n 

n 

1-1 


{*!>«!  Wj» 


>  0 


n 

I  n  PHX  I  *4(jp  ))  .  (2.18) 

1-1  1  1  J 


Now  applying  the  second  equality  In  Equation  2.13 


Pr(Pj(X)  - 


N 

i)  >  n 

k-0 


n  q.oo 


(2.19) 


Applying  this  Inequality  In  Theorem  2.3  yields  the  lower  bound.  The 
upper  bound  follows  similarly.  □ 


The  Bonferronl  inequalities  (  9  )  can  also  be  used  to  establish 
reliability  bounds  based  upon  paths  and  cuts. 


Le—a  2.3.  (Bonferronl  Inequalities).  For  arbitrary  events  Ep  ....  E^ 


1 

1)  Pr(E  U  E  U  ...  U  E  )  <  [  Pr(E.)  (2.20) 

*  ‘  *  i.i  J 


t 

11)  Pr(E  U  R  U  ...  U  E  )  >  [  Pr(E  ) 

1  J-l  1 


A 

-  I  Pr(E  O  £  )  .  (2.21) 

J.k-1  J 

J<k 
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Applying  Che  Bonferronl  Inequal  It  leu  to  the  events  (p^(X)  ■  1), 

J  •  1,  ....  a,  and  («j(X)  •  0),  J  •  1 . t  yields  two  wore  aeta 

of  lower  and  upper  bounds  on  the  system  reliability. 


theoram  2.4.  (Bonferronl  Bounds). 


1) 


■ 

Pr(+(X)  >  a)  <  [  Pr(p  (X)  -  1) 

j-1  3 


(2.22) 


11)  PrU(X)  >•)»  J  Pr(p  (X)  -  1) 

J-1  J 


a 

-  I  PHe.QP  -  Pfc(X)  -  1)  (2.23) 

J.k-1  3 

J<k 


111)  PrU(X)  >  ■)  >  1  -  1  PrU.(X)  •  0)  (2.24) 

J-1  3 

t 

lv)  Pr ( ♦ (X)  >  m)  <  l  -  l  PrU  (X)  -  0) 

J-1  3 


♦  1  Pr ( «c  (X)  -  •  (X)  -  0)  . 

J.k-1  J 

J<k 


(2.25) 

a 


The  above  theorem  holds  regardless  of  whether  or  not  the 
Independent  or  associated.  Under  independence  we  have 


Xj's  are 


Corollary  2.3. 


X  are 

n 


(Bonferronl  Bounds 
independent,  then 


for 


Independent  Components). 


If 


•  •  •  •  * 


•  H 


i)  h"(q>  <  l  n  n  Qt  oo , 

♦  j-l  k-0  4rPk 


(2.26) 


h  H 


id  h"(q)  >  l  n  n 

♦  j-l  k-0  lcpk 


s  N 

l  n  n  Q.<k) 

J,t-1  k-0  lcVk 

J<* 


(2.27) 


whe  re  7  - 


t  M 


(V°.  ....  V*)  -  v  J»t, 


111)  H"  (Q)  >  1  -  l  n  H  (1  -  <Mk  ♦  1)). 

*  "  W  k-0 


(2.28) 


lv)  H#(Q)  <  1 


t  M 

l  n  n  (i  -  qt(k  ♦  D) 

1-1  k-0  k 

J  lcC* 


t  M 

♦  I  n  n  u  -  Q.(k  ♦  d) 

j,l-l  k-0  k 
j<l 


(2.29) 


where  * 


-  (W° . «">  -  V  A 


Proof.  Equation  2.13  end  Theorem  2.4  establish  pert  (1)  of  the  theorem; 
pert  (111)  follows  similarly.  To  establish  pert  (11),  It  suffices  to 


show  that 


pr{p.(x)  -  o,(x)  -  i)  -  n  n  q4oo  • 

k-0 


(2.30) 


Now  by  the  definition  of  1  and  the  Independence  of  . 


Prbj  (4)  -  Pt(X)  -  1)  -  Pr 


n 

Hi  IU1>I1(^)VK1(.^)) 


Pr 


n 

H  >> 


n  n  Qt<k>  . 


k-°  lcvk 


(2.31) 


Part  (lv)  follows  similarly. 


The  bounds  established  in  Theorem  2.2,  2.3,  and  2.4,  and 

Corollaries  2.1,  2.2,  and  2.3  are  direct  gencralizat ions  of  the  path-cut 
bounds  for  binary  systems  developed  by  Esary  and  Proschan  (  7  ],  the  max- 
mln  bounds  for  binary  systems  developed  by  barlow  and  Proschan  (  1  ], 
and  the  Bonferronl  bounds  developed  by  Messinger  and  Shooman  (11). 

As  for  binary  systems,  the  multlstate  max-mln  lower  bound  seems 
better  than  the  path-cut  lower  bound  (i.e.,  provides  a  tighter  bound) 
for  systems  composed  of  very  unreliable  components,  and  the  path-cut 
lower  bound  seems  better  for  systems  composed  of  very  reliable  components. 
Similarly,  the  max-mln  upper  bound  seems  better  than  the  path-cut  upper 
bound  for  systems  of  highly  reliable  components,  and  the  path-cut  upper 
bound  seems  better  for  systems  of  very  unreliable  components.  Regardless 
of  which  of  these  two  bounds  Is  likely  to  do  better  for  a  particular 
system,  one  probably  should  calculate  both;  since  both  bound  pairs 


involve  the  calculation  of  the  sane  quantities,  there  is  very  little 
extra  work  in  also  computing  the  second  pair  while  computing  the  first. 

Of  course,  if  one  is  only  computing  lower  bounds  (or  only  upper  bounds) 
this  comment  does  not  apply. 

The  path-based  Bonferronl  bounds  (parts  (1)  and  (11)  of  Theorem 
2.4  and  Corollary  2.3)  are  most  useful  when  component  reliabilities 
are  low,  and  the  cut-based  bounds  (parts  (ill)  and  (iv)  of  Theorem  2.4 
and  Corollary  2.3)  are  most  useful  when  component  reliabilities  are  high. 
In  intermediate  cases  these  bounds  may  provide  no  useful  information, 
since  they  may  take  values  outside  the  range  [0,  1]. 


Example  2.1.  Consider  the  following  three-state  coherent  system  (C,  ♦) 
consisting  of  10  independent  components,  and  having  mln-cut  vectors  as 
follows; 
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We  win  take  the  component-performance-dlst ribut i»n  matrix,  0,  to  be 


1.0 

0.8 

0.5 

1.0 

0.8 

0.4 

1.0 

0.9 

0.8 

1.0 

0.5 

0.1 

1.0 

0.6 

0.5 

1.0 

0.9 

0.8 

1.0 

0.7 

0.6 

1.0 

0.5 

0.1 

1.0 

0.7 

0.4 

1.0 

0.6 

0.2 

Calculated  reliabilities  and  reliability  bounds  are  as  follows. 
(Computations  were  done  on  a  computer  since  a  direct  computation  of 
H^(Q) ,  for  example,  would  be  very  difficult  to  do  by  hand.) 


PrU(X)  >  1)-  .996729 


Lower  Upper 

Path-Cut  Bounds  .993449  .999269 

Max -Min  Bounds  .8  .998963 

Bon f efT on 1  Path  Bounds  -6.0478  4.82 

Bonf erroni  Cut  Bounds  .99343  .999662 


m^J-  2  PrU(X)  »  2)  -  .317652 


Lower  Upper 

Path-Cut  Bounds  .237988  .900234 

Max -Min  Bounds  .14  .52 

Bonferronl  Path  Bounds  -9.49076  2.22278 

Bonferronl  Cut  Bounds  -.14466  .539065 


Note  that  some  of  the  Bonferronl  bounds  are  outside  of  the  region  (0,1). 


3.  Bounding  the  Syitw  Reliability  Using  Modular  De comp os It Ions 

The  concept  of  a  nodule,  a  subset  of  the  component  a  of  a  ayaten 
having  lta  own  atructure  function  and  acting  like  a  alngle  component 
In  relation  to  the  reat  of  the  ayaten,  la  well  known  In  reliability  [3). 
For  large,  complex  syatema  it  la  almost  Inevitable  that  modulea  will 
exist,  simply  because  It  seems  to  be  Inherent  In  man's  way  of  thinking 
to  break  a  large  problem  into  a  number  of  smaller  problems.  In 
system  design  this  translates  Into  sequentially  breaking  a  complex 
machine  Into  a  number  of  systems,  each  system  Into  subsystems,  each 
subsystem  Into  a  number  of  components,  etc.  This  results  In  a 
hierarchy  of  modular  decomposlt ions  of  the  overall  machine.  There  are 
two  Important  reasons  to  consider  exploiting  the  modular  decompositions 
of  a  system  In  developing  reliability  bounds.  The  first,  and  probably 
the  most  Important  from  a  practical  point  of  view.  Is  that  the 
calculation  of  all  the  min  paths  or  all  the  min  cuts  for  a  very  complex 
system  can  be  Incredibly  Involved  and  time  consuming.  For  example,  the 
so-called  "Rasmussen  report"  (151  on  the  assessment  of  accident  risks 
In  U.S.  commercial  nuclear  power  plants  Includes  two  appendices  of 
approximately  550  pages  each,  which  are  entirely  devoted  to  descriptions 
and  listings  of  the  fault-tree  models  used  for  analyzing  bolllng-water 
and  pressurlzed-water  reactors.  To  calculate  directly  all  the  min  cuts 
or  all  the  min  paths  for  such  fault-trees  Is  not  feasible. 

By  exploiting  modular  decompositions,  the  computations  Involved 
In  computing  reliability  bounds  can  be  greatly  reduced;  Indeed  for 
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where 


(3.2) 


(3.3) 


and  V . ,  V.t  ....  V  in  the  above  equation  are  the  min  cuta 
1  cl 

relative  to  system  performance  at  minimum  level  l.  The  quantity 
D*(Q)  is  simply  the  path-cut  lower  bound  for  the  system 
reliability  relative  to  performance  at  minimum  level  t.  One  might 
naturally  conjecture  that  L™(Q)  ■  D*(Q)  for  all  m  (which  is 
equivalent  to  conjecturing  that  D*(Q)  i»  a  decreasing  function), 
but,  perhaps  surprisingly,  this  is  not  so,  as  the  following  example 
shows . 


Example  3.1.  M  -  2.  C  -  (1,  2,  3) 

Min-Cut  Vectors  for  System 
Performance  at  Minimum  Level  w! 


Min-Cut  Vectors  for  System 
Performance  at  Minimum  Level  m-2 


(1.  0,  0)  (1,  1,  1) 
(0,  1.  0) 

(1.  0,  0) 
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Since  L"(Q)  -  max  {D*(Q))  <  max  { Pr { ♦ (X)  >  t>)  -  PrU(X)  >  ml 
♦  b< 1<M  *  «<t<M 


l“(Q)  Is  Itself  a  lower  bound  on  the  system  reliability  at  minimum 


performance  level  m,  and  is  indeed  a  generally  better  bound  than 


D*(Q) .  Thus,  we  have  proved  the  following  corollary. 


Corollary  3.1.  D^(Q)  <  1>(Q)  <  H^(Q) 


□ 


In  addition  to  providing  a  better  lower  bound  than  D  (Q) ,  L  (Q)  also 
*  9  9 

has  the  advantage  of  being  itself  a  performance-distribution  vector 
and  can  thus  be  used  in  computing  system  reliability  bounds 
sequentially  via  modular  decompositions. 

The  following  lemma,  which  will  be  used  in  proving  the  main 
result  of  this  section,  shows  that  the  more  reliable  the  components, 
the  better  the  path-cut  lower  bound  is  on  the  system  reliability. 


3.1.  If  Q  <  Q,  then  L  (Q)  <  L  (Q) . 


Proof.  Since  Q  <  Q, 


dJ(Q) 


t  M 

n  [i  -  n  n  <1 


i-i 


k-0  .  „k 

iu:j 


Qj  (k+1) ) ) 


</7ii-/7  n  (i  -  y.(k+i>)) 

J-l  k-0  ,  k  1 


t  — 

V^> 


(3. A) 


icC 


for  i  “  1,  ....  M.  Thus 


2 


L"(g)  -  max  (D*(Q))  <  max  {D*(Q)}  -  l"(Q) . 
*<1<M  9  *<1<N  9  9 


(3.5) 

□ 


Lemma  3.2.  Suppose  chat  the  coherent  structure  *  can  be  decomposed 

Into  r  modules  having  structure  functions  x^.  . ...  Xf.  and  that  the 

system  performance  at  minimum  level  m  is  dictated  by  the  module 

0  1  M 

performances  according  to  a  single  cut  V’  -  (C  ,  C  ,  ....  c  ) ,  i.e. 


r 

l(i(x)  >  ■)  "  ^  I(xl<s)>*1(fr))  . 


(3.6) 


Furthermore,  assume  that  all  components  are  Independent.  Then 


.  r  Xi(V) 

D7(Q)  <  U  D  1  (Q)  (3.7) 

9  1*1  X1 


Proof.  Diagrams t leal ly,  we  can  express  the  system  in  terms  of  its 
modules  as  follows. 


♦  : 


1{x1(*)>x1(V) ) 
1 ( X2<*) >x2( % r)) 


1{xr(*)>*r(w)> 


J 
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Write  I,  .  . 

{ X.(x) 

functions,  «. 


>  *t(V)} 
(x).  *12^?^ 


in  terms  of  Its  minimal-cut  structure 
. ...  "j,  (x) .  as  follows: 


I(X1(x)>x1(¥’)} 


n  *. .  (x) , 

j-i  J 


i  -  i. 


r  . 


(3.8) 


Then 


x.ir) 

D  *  (Q)  -  n  PrU..(x)  -  1)  1-1,  ....  r  (3.9) 

1  J-l 


* 

Now  consider  a  new  system  $  obtained  from 
replicated  component  in  each  mln-cut  structure 

an  Independent  but  equally  reliable  component. 

* 

vector  of  component  per f ormances  for  $  ,  and 


t  by  replacing  each 

function  by 

* 

Let  X  be  the  random 
* 

Q  be  the  component - 


* 


performance  distribution  matrix  for  *  .  Diagramatlcally, 
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* 

By  the  Independence  of  coaponenta  In  4  , 


PrU*(X*)  >  a) 


r  ‘1 

U  n  PrU  (X) 
1-1  J-l  J 


1) 


(3.10) 


and  ao  by  Equation  3.9 


H“  (Q*)  -  U  D  ‘ 
f  1-1  X1 


*.(V) 


(Q) 


(3.11) 


Now  the  aln  cuta  of  4  and  1  are  Identical,  and  each  aln-cut 

atructure  function  la  obtained  by  applying  the  "parallel  operator" 

U  to  k..  .....  k.  for  »oae  choice  of  J..  ....  J  (recall 
1J1  Jr  1  r 

there  la  no  overlap  of  component a  aaong  the  varloua  aodulea) .  Thu* , 

D*#(Q  )  -  D*(Q).  Coablning  thl*  reault  with  Equation  3.11. 


r  *1(V)  .  «  .a 

U  D  (Q)  "  >  -  D*a<Q  >  -  d!<9>  • 

1-1  X1  tat 


(3.12) 

□ 


Lemma  3.3.  If  Q  <  Q,  then  H^(Q)<Ht(Q). 

Proof.  Thl*  leaaaa  la  a  reatateaent  of  Theorea  4.2.1  In  (  6  |. 

We  are  now  In  a  position  to  eatabllah  the  aaln  reault  of 
thla  aectlon. 


25 


Theorem  3.1.  Le  t  (C,  ♦)  be  a  mult  1st  ate  coherent  system  of 
independent  components.  Suppose  (C,  f)  has  a  modular  decumpos 1 l ion 

into  r  modules  ( ( A ^ .  x^)),  i  ■  1 . .  with  module  organising 

structure  ».  Then 


H#(Q)  -  H+(.*r  (Q>>  > 


S(jrk<Q)> 

VVx<Q)) 


1  if(sr&(Q))  »  l#(q>. 


(3.13) 


where 


•  »MQ)  - 


«  <Q> 

L  (Q) 

*1 

*1 

e 

y  (Q)  - 

e 

• 

£ 

• 

"  <Q> 

• 

L  (Q) 

*r  ^ 

x 

*r 

Proof:  Ut  ;*<*)  -  <*1<x> . Xf(*)).  To  establish  the  first 

equality,  note  that  for  any  m  -  0,  1 . M 

H*(Q)  -  PrU(X)  »  •)  -  [  I{#(x)>.,Pr<X  -  *> 


l  1(*<1c,))..)p',i  *  *» .  <>•»> 


x*  S‘ 


For  any  y  c  sr,  let  A{y)  -  (jcs"  :  x(x)  -  x).  Since 


26 


U  A(x)  -  S-. 
ycSr 


H"(Q) 


l 

JP:Sr 


1 (♦(!)>■) 


I 

_m-A(y) 


Pr(X  -  x) 


*  I 

yes* 


I) 


H*<.ar^CQ)) . 


(3.15) 


To  establish  the  Inequalities,  note  that  by  applying 
Corollary  3.1  to  the  organlxlng  structure  +  and  the  modules 

Xl*  ’***  xr *  **  h*we 


VJri.(Q))  >  L^(JlMQ)) 
H^VMQ))  >  L#(*  (Q)) 


and 


JT^CQ)  >  *MQ)  .  (3.16) 

Applying  I,  taw  3.1  and  3.3  yields 

(0))  iHjt^lQ))  *nd  L,(.r  (Q),  >  L,(  ^(Q))  .  (3.17) 

It  rexilni  only  to  show  that  L^(yMQ))  >_  L^(Q).  Let  . Ct 

denote  the  alnlaal-cut  structure  functions  for  ♦  perforalng  at  alnlau 


m 


— 
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level  l,  and  let  ♦  j(x)  •  4j(Xj(*).  ....  Xf(*)).  Let  p^ . Hjt 

be  the  minimal-cut  structure  function*  for  >  ^  (perfuming  at  minimum 
level  1,  since  Is  binary-valued).  Then  the  collection 

(Uji'  !  J  ■  lt  ....  t  i  k  ■  li  ....  tj)  are  the  minimal  cuts  for  * 
performing  at  minimum  level  t,  since:  "  0  Implies  *  0, 

which  Implies  -  0,  which  Implies  +  •  0;  with  J  fixed  and  k 
varying,  the  p^  are  distinct,  because  they  are  the  min  cuts  for 
and  for  k  varying  they  are  distinct  because  no  component  Is  In 
more  than  one  module;  each  p^  la  minimal  for  #  since  each  Is 
minimal  for  S^.  Thus 


l  1  J 

d‘(Q)  -77/7  Pr(p.k  -  1)  . 
*  J-l  k-1 


(3.18) 


Now  by  Leona 


r  *.(V .) 


D*  (Q)  <  U  D  1  J  (Q) 
fJ  1-1  *1 


where  V  Is  the  min  cut  corresponding  to  £..  Since  l.  (Q)  >.  D  (Q) 

J  X1  *1 


r  *4  V.) 


d!  (Q)  <  U  l  1  J  (Q)  -  H 1  (y  (Q))  . 
#J  1-1  *1  X 


(3.19) 


Using  this  result  we  csn  write 


t  *  1  *1 

d‘(1T  <Q))  -  /J  H  I  /  <Q))  >  /I  D  (Q) 
*  X  j-1  X  J-1  ^ 


t  J 

-  n  n  -  1) 

J-1  k-1 


Jk 


(3.20) 


Combining  this  result  with  Equation  3.18  yields 


Dj(^(Q))  >  dJ(Q) 


t  -  0,  1 . M 


(3.21) 


Finally, 


L“(tf  (Q))  -  mss  (d‘(^  (Q)))  >  mss  <D*(Q))  -  l“(Q)  . 
v  X  m<  t<M  *  X  «<i<m  ♦  t 


(3.22) 

□ 


It  Is  slso  possible  to  use  modular  decompositions  In  establishing 
upper  bounds  on  the  system  reliability.  Since  all  results  and  their 
proofs  are  close  analogues  to  those  which  were  developed  for  the 
path-cut  lower  bound,  we  will  simply  state  without  proof  the  main 
theorem,  omitting  the  preliminary  results. 

Let 

eJ(Q)  -  1 

and 

*1  M 

e‘(Q)  -  U  n  /7  Q.(k)  (3.21) 

*  J-1  k-0  .  _k  1 

J  icPj 
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where  . . are  the  min  paths  relative  to  system  performance 

*  *» 

‘  t 

at  minimum  level  t.  (The  quantity  E^<Q)  Is  simply  the  path  upper 
bound  for  the  system  reliability  relative  to  performance  at  minimum 
level  1.)  Let 

U*(Q)  -  min  (E*(Q)}  and  U  (Q)  -  (U°(Q) . U*(0)  .  (3.24) 

♦  Oll<m  *  #  *  ’ 

It  Is  easily  verified  that  U^(Q)  L  H^(Q),  and  that  U4(Q)  Is  a 
performance-distribution  vector. 

Theorem  3.2.  Under  the  same  hypotheses  as  Theorem  3.1, 


(U  (.jr  (Q»  ) 

Ha(Q)  -  H  (.JT(Q))  <  '  *  l  '  <  U  f#  (Q))  <  U  fQ).  (3.25) 

*  *■  |h  (<tr  (Q))  I  *  *  ♦ 


where 


f\i 


^i(g) 


u  (Q) 

*r 


□ 


We  will  complete  this  section  with  an  example  Illustrating  the 
decomposition-baaed  method  of  calculating  system  reliability  bounds. 
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Exaaple  3.2.  Consider  the  following  three-etete  coherent  systea 
(C,  *)  consisting  of  10  Independent  coaponents,  and  having  a  aodular 
decomposition  Into  3  modules  with  structures  Xj.  Xj«  Xj  «nd 
organizing  structure  ♦  •  The  first  aodule  consists  of  coaponents 
1,  2,  3,  4,  and  has  aln-cut  vectors  as  follws: 


XjtO  »  1  <»-i> 

(0.  1,  0.  1) 

(2.  0,  0.  0) 


X2<-)  >  2  (a-2) 

(1,  0,  2,  0) 

(1.  1.  1.  1) 

(2.  2.  0.  2) 


The  second  aodule  consists  of  coaponents  5,  6,  7,  8,  and  has  a 
structure  Identical  to  that  of  the  first  aodule.  The  third  aodule 
consists  of  coaponents  9,  10  and  has  aln-cut  vectors: 


X3<*>  I  1  (•*!) 

(1.  1) 

(2.  0) 


Xj( * )  1  2  (a-2) 

(0.  2) 

(2.  1) 


The  organizing  structure  t  has  aln-cut  vectors 


t  l-ll  i _ 

(1.  0.  0) 


»(•)  i  2  (-2) 

(1.  2,  1) 

(2.  0.  1) 

(2,  2.  0)  . 
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vectors  for  #,  which  turn  out  to  be  identical  to  the  min-cut  vectors 


of  Example  2.1.  Therefore,  we  have  found  a  modular  decomposition  of 
that  system.  Taking  the  component  performance  distributions  to  be 
identical  to  those  of  Example  2.1,  we  can  compute 


L#(Q) 

U#(Q) 

L  (Q) 

X1 

H  (Q) 
X1 

Uy  (Q) 
X1 

L  (Q) 
x2 

Hy  (Q) 
x2 

u  (Q) 
x2 

L  (Q) 
x3 

Hy  (Q) 
x3 

o  (Q) 

*3 

Lf(y cqj) 

M#<y  <Q» 


(1.0, 

.993449, 

.237988) 

(l.o. 

.996729, 

.317652) 

(l.o. 

.999269, 

.900234) 

(l.o. 

.979308, 

.808830) 

(l.o. 

.981200, 

.833000) 

(1.0, 

.988336, 

.930811) 

(l.o. 

.963724, 

.657930) 

(l.o. 

.969400, 

.676000) 

(1.0, 

.982612, 

.914354) 

(l.o. 

.312000, 

.140000) 

(1.0, 

.360000, 

.140000) 

(1.0, 

.392000, 

.140000) 

(1.0, 

.995229, 

.252572) 

(1.0,  .995229,  .274072) 


V.*(Q))  -  (1.0,  .996729,  .300184) 

H  (.JT'  (Q))  -  (1.0,  .996729.  .317652) 

A 

U A.HT  (Q))  -  (1.0,  .996729,  .390005) 

*  1 

H  ( 1/  (Q))  -  (1.0,  .999269.  .370486) 

*  A 

IMV/  (Q))  -  (1.0,  .999269,  .448339)  . 

♦  1 

In  all  cases,  L<(*)  la  Identical  to  D#(*),  and  U.(*)  to  E>(*). 

Note  that  the  two  computations  of  the  system  reliability,  direct  and 

decoi^>oaltlon-based,  agree.  Also,  note  that  the  decoapoaltlon-based 

bounds  are  Indeed  tighter  than  the  direct  bounda  which  were  computed  in 

Example  2.1  and  are  repeated  here. 

A  comparison  of  the  con^uter  tinea  required  to  compute  the 

direct  bounda  and  the  decompoaltlon-based  bounda  for  the  examples  nay 

serve  to  Illustrate  the  conputat lonal  advantage  of  exploiting  nodular 

decompositions.  All  bounda  were  computed  via  a  single  progran  written 

In  BASIC  and  running  on  a  Digital  Equipment  Corporation  Syatcm  2060 

* 

computer.  The  program  uaed  512.14  CPU-aeconds  to  compute  the  path-cut 
bounda  and  system  reliability  directly,  and  a  total  of  3.66  CPU-aeconda 
to  coi^>ute  the  path-cut  bounda  and  reliabilities  for  each  module  and 
the  organizing  structure  (l.e.,  the  figures  shown  In  example  3.2). 


These  figures  reflect  the  substantial  calculations  necessary  to 
determine  the  min  paths  from  the  min  cuts  for  each  system. 
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